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Abstract 

The  analysis  of  many  processes  modelled  by  directed 
graphs  requires  the  selection  of  a subset  of  vertices  which 
cut  all  the  cycles  in  the  graph.  Reducing  the  size  of  such 
a cutset  usually  leads  to  a simpler  and  more  efficient 
analysis,  but  the  problem  of  finding  minimum  cutsets  in 
general  directed  graphs  is  known  to  be  NP-complete.  In 
this  paper  we  show  that  in  reducible  graphs  (and  thus  in 
almost  all  the  "practical"  flowcharts  of  programs)  , m-'nimum 
cutsets  can  be  found  in  linear  time.  An  immediate  appli- 
cation of  this  result  is  in  program  verification  systems 
based  on  Floyd's  inductive  assertions  method. 


This  research  was  supported  by  the  Office  of  Naval  Research  grant  number 
N0001A-76-C-0366. 
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I . Motivation 

A directed  graph  is  often  used  as  a path-generating 
device,  which  models  the  succession  of  events  (in  the  form 
of  edge  traversals)  that  can  take  place  in  some  process. 

Two  common  examples  are  the  graph  representations  of 
finite  state  machines  (with  edges  labelled  by  symbols  from 
some  alphabet)  and  of  flowcharts  of  computer  programs 
(with  edges  labelled  by  instructions ) . 

Finite  directed  graphs  which  do  not  contain  cycles  can 
describe  only  finitely  many  paths,  each  of  which  contains 
finitely  many  edges,  and  thus  the  path-analysis  of  these 
' graphs  is  usually  straightforward.  The  analysis  becomes 

qualitatively  different  in  the  presence  of  cycles,  since  the 
number  and  length  of  the  paths  need  not  be  finite  any  longer. 

However,  in  many  cases  the  path-analysis  of  arbitrary 
graphs  can  be  reduced  to  that  of  cycle-free  graphs  by  selec- 
ting an  appropriate  subset  of  vertices  (called  cutpoints) 

such  that  any  cycle  in  the  graph  contains  at  least  one  cut-  i 

point.  These  cutpoints  dissect  the  graph  in  a natural  way 
^ into  cycle-free  components,  which  can  be  analysed  separately, 

t All  that  remains  to  do  is  to  relate  the  overall  behaviour  of 

I* 

the  original  graph  to  that  of  its  components,  and  this  is 

usually  done  by  some  kind  of  induction.  j 

An  important  concrete  example  of  such  an  analysis  is  ! 

Floyd's  method  for  proving  the  partial  correctness  of  computer  , 

I 
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proqrams  (Fioyd  [1967]).  Since  execution  sequences  of 
instructions  may  bo  arbitrarily  long  (or  infinite),  one  uses 
the  selected  outpoints  in  the  flowchart  in  order  to  "chop" 
them  into  subsequences  of  bounded  size.  If  tne  correctness 
of  the  specifications  attached  to  the  outpoints  is  preserved 
along  any  such  subsequence,  one  can  infer  the  overall  correct- 
ness of  the  program  by  induction  on  the  number  of  subsequences. 

Graphs  may  have  many  sets  of  outpoints,  all  of  which  are 
useful  in  principle  (an  example  of  a highly  redundant  set  of 
outpoints  can  be  the  set  of  all  the  vertices).  In  many  cases, 
the  number  of  outpoints  selected  has  a strong  influence  on 
the  complexity  of  the  subsequent  analysis.  For  example,  if 
each  outpoint  gives  rise  to  an  equation  (where  the  equated 
quantities  may  be  numbers,  logical  formulaes,  or  sets  of 
strings) , and  the  time  required  in  order  to  solve  n such 
simultaneous  equations  is  a rapidly  growing  function  of  n, 
then  minimizing  the  number  n of  outpoints  can  be  very 
des i ruble . 

The  problem  of  finding  the  smallest  set  ol  vertices  which 
cut  all  the  cycles  in  a given  directed  graph  is  NP-complete 
(Karp  [1972J),  and  thus  the  optimization  of  the  set  of  cut- 
points  is  probably  too  expensive  for  big  graphs.  However,  in 
this  paper  we  show  that  for  reducible  graphs,  the  smallest 
set  of  cutpcints  can  be  found  in  linear  time. 


Reducible  graphs  occur  naturally  in  connection  with  flow- 
charts of  computer  programs.  All  the  flowcharts  which  have  a 
clear  loop  structure  (with  uniquely-defined  loop  entries)  are 
reducible  graphs,  and  as  observed  empirically,  most  programs 
used  in  practice  have  this  property.  Reducible  graphs  have 
been  extensively  analysed  in  connection  with  problems  of  code- 
optimization (see  Aho  and  Ullman  [1973] , volume  2) . 

As  a typical  application  of  the  suggested  algorithm,  let 
us  consider  once  more  Floyd's  method.  An  interactive  imple- 
mentation of  this  method  needs  a user-supplied  set  of  inductive 
assertions,  one  for  each  cutpoint.  Since  assertions  in  non- 
trivial programs  tend  to  be  very  long  and  very  detailed,  a 
small  number  of  outpoints  can  minimize  the  user's  effort  in 
finding  the  relations  between  program  variables  at  each  cut- 
point,  in  formalizing  them  as  inductive  assertions,  in  "fine 
tuning"  their  pairwise  power  so  that  they  may  imply  each  other, 
and  even  in  entering  them  into  the  computer.  Furthermore,  the 
number  of  verification  conditions  that  the  computer  must  prove 
is  proportional  to  the  number  of  outpoints,  and  thus  reducing 
the  number  of  outpoints  can  shorten  the  verification  time 
considerably . 

One  possible  fallacy  in  this  argument  is  that  some 
selections  of  outpoints  may  be  more  natural  than  others,  giving 
rise  to  shorter  or  simpler  inductive  assertions. 
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However , a special  feature  of  the  suggested  algorithm  is  that 
the  selected  cutpoints  are  always  loop  entries,  and  in  most 
practical  cases  these  places  tend  to  be  natural  locations  for 
inductive  assertions. 

II . Basic  Definitions 

A graph  is  a pair  (V,E)  where  V is  the  set  of  vertices  and 
ECVxV  is  the  set  of  (directed)  edges  (an  edge  from  v to  its 
son  v^  is  denoted  by  v -»•  v'  ) . A path  from  v to  v*  is  a sequence 
of  zero  or  more  edges  in  E of  the  form  v = v^  -*■  V2 

(if  the  intermediate  vertices  are  known,  we  shorten  it  into 

* 

V -*■  v'  , and  say  that  v'  is  a descendant  of  v)  . A cycle  is  a 
non-empty  path  from  a vertex  to  itself;  it  is  simple  if  all  the 
vertices  along  it  (except  the  first  and  last)  are  distinct.  A 
graph  which  does  not  contain  cycles  is  called  a dag  (directed 
acyclic  graph) . 

A rooted  graph  is  a triple  (V,E,r)  such  that  (V,E)  is  a 

graph,  the  root  r is  in  V,  and  for  any  veV  there  is  a path 

* 

r -*■  V.  A depth  first  search  (DFS)  of  a rooted  graph  is  a way 
of  exploring  a rooted  graph,  which  can  be  implemented  in  linear 
time  0(|v|+|e])  on  a pointer  machine,  using  an  auxiliary  stack. 

A detailed  description  of  DFS  and  its  properties  can  be  found 
in  Tarjan  [1972].  A DFS  defines  two  possible  orders  on  the 


vertices : 
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(i)  preorder  - the  order  in  which  vertices  are  pushed 
into  the  stack  during  the  DFS. 

(ii)  postorder  - the  order  in  which  vertices  are  popped 
from  the  stack  during  the  DFS, 

A DFS  defines  a partitioning  of  the  edges  into: 

(i)  Backward  edges  (or  fronds)  : edges  v ->■  v^  such 
that  v'  is  already  in  the  stack  when  v is  pushed 
into  the  stack, 

(ii)  Dag  edges:  all  the  other  edges.  In  the  literature 

these  edges  are  classified  further  into  tree  edges, 
reverse  fronds  and  cross  links;  we  shall  not  use 
this  finer  classification. 

The  classification  of  edges  may  depend  both  on  the  graph 

and  on  the  order  of  search  in  the  DFS,  For  a given  G = (V,E,r) 

and  DFS  a,  we  define  the  dag  of  G defined  by  a to  be 

Gj  = (V,E^,r) , where  is  the  set  of  dag  edges  in  E,  G^  is 
d d d d 

cx 

always  a rooted  dag,  and  if  any  edge  in  E \ E^  is  added  to  it, 
a cycle  is  generated, 

III , Cutsets  in  Graphs 

Definition : A set  S of  vertices  in  a graph  G is  a cutset 

if  any  cycle  in  G contains  at  least  one  vertex  form  S,  A 
cutset  S is  minimum  if  for  any  other  cutset  s',  |sj  < ls'|. 
The  vertices  in  a cutset  are  called  cutpoints , 


I 
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Note  that  a minimum  cutset  of  G need  not  be  unique  (e.g., 
when  G is  a single  cycle  of  length  >2),  but  all  the  minimum 
cutsets  have  the  same  size. 

Definition : The  set  of  all  cycles  in  a graph  G is 

denoted  by  C^.  Given  a set  S of  vertices,  the  set  of 
all  the  cycles  in  G which  are  not  cut  by  vertices  in 

S is  denoted  by  . j 

i 

6 . . . ' 

Clearly,  is  the  initial  set  of  cycles  and  a set  ^ 

G G I 

S is  a cutset  iff  . ] 

A simple  but  important  observation  is  that  the  cycle  \ 

cutting  problem  is  monotonic  in  the  following  sense:  \ 


Lemma  1 : Let  G be  a graph  and  let  s. , s be  two  sets  of 

®1 

vertices  such  that  C„  C C„  . Then  the  minimum  number  of 

G ““  G 

vertices  which  should  be  added  to  to  get  a cutset  is  equal 
to  or  greater  than  the  minimum  number  of  vertices  which  should 
be  added  to  to  get  a cutset. 

Proof : Let  S'  be  a minimum  set  of  vertices  such  that 

®1 

is  a cutset.  Any  cycle  in  is  a cycle  in  , and  thus 

/ / 

must  be  cut  by  some  vertex  in  . Consequently,  S^US2  is 
also  a cutset  in  G , and  the  minimum  number  of  vertices  that 
should  be  added  to  to  obtain  a cutset  can  not  exceed  ! | • 

Q.E.D. 

This  lemma  actually  asserts  that  in  order  to  solve  a harder 
problem,  more  outpoints  are  needed.  We  now  use  this  property 


1 

i 
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of  the  problem  in  order  to  describe  an  iterative  process  by 
which  minimum  cutsets  can  be  monotonical ly  "grown".  The  induc- 
tive hypothesis  used  at  each  stage  is  that  the  current  set  S of 
vertices  is  a subset  of  some  minimum  cutset.  Initially  S = (}> , 
which  clearly  satisfies  this  hypothesis.  When  the  set  S of 
vertices  becomes  a cutset,  the  hypothesis  about  being  a subset 
of  a minimum  cutset  makes  S itself  a minimum  cutset.  The  main 
problem  is  of  course  how  to  select  a new  vertex  which  can  be 
added  to  an  intermediate  set  S without  violating  the  inductive 
hypothesis  and  without  knowing  what  the  minimum  cutsets  of  G are, 
The  following  theorem  shows  that  under  certain  (strong) 
conditions,  this  can  be  safely  done: 

Theorem  1 : Let  S be  a subset  of  some  minimum  cutset  in  a graph 

S 

G,  and  let  v.  “>•  v_  v,  v.  be  an  uncut  cycle  in  C„ . 


Suppose  that  v,  has  the  property  that  any  cycle  in  cut  by 
some  v^  (2  < i < k)  is  also  cut  by  v^^.  Then  there  exists  a 
minimum  cutset  in  G which  contains  SU{v^}. 

S 

Proof:  By  assumption  any  cycle  in  left  uncut  by  v^  is  also 

^ SU{v^}  SU{v.} 

left  uncut  by  V2 , v^/  ..*»  and  thus  ^ ^ 

for  all  2 ^ i < k.  By  Lemma  1,  the  size  of  the  minimum  cutset 

containing  SU{v^ } is  smaller  than  or  equal  to  the  size  of  the 

minimum  cutset  containing  SU{v^}  However,  the  cycle 

V,  -►  v-  V,  -♦  V,  is  not  cut  by  vertices  in  S,  and  thus 

12  k 1 

any  cutset  containing  S must  also  contain  SU(v  } for  some 
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1 ^ j ^ k.  Consequently,  SU{v^}  is  contained  in  some  minimum 
cutset  in  G. 

Q . E . D . 

The  problem  in  applying  Theorem  1 is  that  in  general,  there 
need  not  exist  a cycle  for  which  one  of  the  vertices  is  superior 
to  all  the  others  in  cycle-cutting  power.  However,  as  we  shall 
show  later  in  the  paper,  this  is  exactly  the  case  if  the  graph 
G is  reducible. 

Note  that  a vertex  v^ , which  does  not  satisfy  the  condition 
in  Theorem  1 with  respect  to  the  initial  set  S = <|) , may  still 
satisfy  the  weakened  condition  at  a later  stage  (with  respect 
to  a bigger  S) , since  becomes  successively  smaller.  (For 

(j 

c 

example,  when  a single  uncut  cycle  remains  in  C„ , any  vertex 

(j 

along  this  cycle  can  be  taken  as  . Thus  even  if  very  few 
vertices  satisfy  this  condition  initially,  it  is  still  possible 
to  construct  iteratively  a full  cutset  if  sufficiently  many 
vertices  become  available  at  later  stages. 

IV.  Reducible  Graphs 

A number  of  equivalent  definitions  of  reducible  graphs  are 
known  (see  Hecht  and  Ullman  [1974]).  One  of  them  is: 

Definition : A rooted  graph  G is  reducible  if  the  dag  of 

G defined  by  a , G^ , is  the  same  for  any  DFS  a of  G. 

The  simplest  example  of  a non-reducible  graph  appears  in 
Fig.  1(a)  . A DFS  of  this  graph  can  proceed  either  along  v^^ 


or  along  ->■  giving  the  two  decompositions  illustrated 

in  Fig.  1(b)  and  Fig.  1(c)  (the  backward  edges  are  denoted  by 

double  arrows  and  the  dag  edges  by  single  arrows) . 

On  the  other  hand,  the  graph  in  Fig.  2 is  reducible, 

since  it  is  easy  to  verify  that  any  DFS  must  recognize 

v^  V,  V.  ->■  v„  v^  -»■  V-  and  v^  v 

3 1 4 2 5 3 6 

and  all  the  other  edges  as  dag  edges. 


as  backward  edges. 


In  order  to  check  whether  big  graphs  are  reducible,  some 
less  direct  methods  must  be  used.  The  best  known  algorithm 
appears  in  Tarjan  [1974],  and  its  time  complexity  is  slightly 
more  than  linear  in  the  size  of  the  graph.  Some  classes  of 
graphs  can  be  shown  to  contain  only  reducible  graphs,  and  thus 
special  checks  are  not  needed  for  them.  For  example,  all  the 
graphs  which  can  be  obtained  by  adding  to  a rooted  tree  some 
edges  that  always  point  from  vertices  to  their  tree  ancestors 
are  reducible.  The  dag  of  these  graphs  is  the  original  rooted 
tree,  and  the  backward  edges  are  all  the  added  edges. 

Definition : A vertex  v'  dominates  another  vertex  v 

* 

in  a rooted  graph  G = (V,E,r)  if  v'  cuts  any  path  r -*•  v. 

One  of  the  basic  properties  of  reducible  graphs  {due  to 
Hecht  and  Ullman)  is: 

Lemma  2 ; If  v ->■  v'  is  a backward  edge  in  a reducible  graph  G, 
then  v'  dominates  v. 

Using  this  lemma,  it  is  easy  to  prove: 

Lemma  3 : If  G is  a reducible  graph,  then  any  simple  cycle  in 

G contains  exactly  one  backward  edge. 

Proof : Let  ^ ^2  ^ simple  graph  in  G.  If 

none  of  the  edges  is  a backward  edge,  this  is  also  a cycle  in  the 
dag  G^  - a contradiction.  We  thus  assume  that  v^^  -*■  v^  is  a back- 
ward edge,  and  show  its  uniqueness. 

If  V.  ->■  V . , is  any  other  backward  edge,  consider  a simple 
path  P from  the  root  r to  If  v^  occurs  along  this  path, 


-1]  - 


I 

► 

■i 

r 

i 


I 


i.‘ 

! 


then  the  path  which  follows  P from  r to  and  then  proceeds 

to  V.  through  v,  - v.,  » ...  *•  v . does  not  contain  v . ^ . On  the 
1^12  1 1 + 1 

II 

other  hand,  if  does  not  occur  along  P,  then  the  path  P 

which  follows  P from  r to  and  then  proceeds  to  Vj^  through 

V.,,  "*■  V . „ *•  ...  *•  V,  does  not  contain  v,  . Both  possibilities 

1+1  1+2  k 1 

contradict  the  dominance  condition. 

Q.E.D. 

Any  cycle  in  a graph  contains  at  least  one  simple  cycle 
(just  consider  the  first  repeated  occurrence  of  a vertex  along 
the  cycle,  with  respect  to  an  arbitrary  starting  point). 

Lemma  3 provides  a useful  partitioning  of  the  set  of  simple 
cycles  in  G in  terms  of  their  backward  edges.  Thus  in  order 
to  check  whether  a given  set  S is  a cutset,  it  suffices  to 
check  for  any  backward  edge  v ^ v'  in  G that  all  the  forward 
dag  paths  from  v ^ to  v contain  vertices  from  S. 

We  end  this  section  by  analysing  the  possible  interactions 
between  simple  cycles  in  a reducible  graph: 

Theorem  2 : Let  and  C2  be  two  simple  cycles  in  a 

reducible  graph  G,  which  have  a common  vertex  w.  If  u -+  u^  and 
V ->■  v'  are  the  backward  edges  in  and  C21  respectively, 

then  either  u*  or  v'  is  contained  in  both  and  C2  (see 

Fig.  3) . 


Proof : Consider  an  arbitrary  path  P in  the  dag  from  the 

root  r to  w.  Since  this  path  can  be  extended  to  u and  v,  both 
u'  and  v'  must  occur  along  P.  Without  loss  of  generality,  we 
can  assume  that  u^  preceeds  v*  along  P.  Let  P^  be  the  path 
constructed  in  the  following  way: 


(i) 

follow 

p 

from 

r 

to 

/ 

u ; 

(ii) 

follow 

^1 

from 

u' 

to 

w; 

iii) 

follow 

from 

w 

to 

V. 

Since  v'  dominates  v,  it  must  be  contained  in  one  of 
these  three  segments.  By  assumption,  it  does  not  occur  along 
segment  (i)  (unless  u = v'),  and  by  the  properties  of  dags  it 
cannot  occur  along  segment  (iii)  (unless  w = v*).  The  result 
that  v'  occurs  along  both  and  immediately  follows. 

Q.E.D. 
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V . Minimum  Cutsets  in  Reducible  Graphs 

Definition ; If  v ->•  v'  is  a backward  edge  in  a reducible 
graph  G,  then  v'  is  called  a head  and  v is  called  a tail 
in  G (we  also  say  that  v ' and  v are  corresponding  head 
and  tail) . 

Definition ; Let  G be  a reducible  graph  which  is  partially 

cut  by  a set  S of  vertices.  Then  a head  v is  active  if 

there  is  some  dag  path  from  v to  a corresponding  tail, 
which  does  not  contain  vertices  from  S.  An  active  head 
is  maximal  if  none  of  its  dag  descendents  in  G is  an 
active  head. 

Example : The  heads  in  the  graph  in  Fig.  2 are  the  vertices 

'^l'  ^^2  ^3  that  v^  has  two  corresponding  tails,  and 

that  V2  is  both  a head  and  a tail  in  G) . When  S = {v^},  the 
head  v^  is  active  (there  is  an  uncut  path  v^  ->•  v^  to  one 

of  the  two  corresponding  tails) , the  head  v^  is  active  (the 
paths  ^2  ->  v^  and  ^ Vg  *-  are  cut  by  S,  but 

the  path  v„  ^ v,  v^  ->•  v,  is  still  open)  , and  the  head  v_  is 

not  active.  Consequently,  the  only  maximal  active  head  in  G is 


Note  that  if  a head  v is  active,  then  there  is  at  least 

g 

one  cycle  in  C„  which  contains  v,  but  not  necessarily  vice 
G 

versa.  However,  unless  S is  a cutset,  the  graph  G contains  at 


least  one  active  head,  and  thus  also  at  least  one  maximal 


active  head. 
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The  main  theorem  justifying  the  cycle  cutting  algorithm  can 
now  be  formulated  as  follows: 

Theorem  3 : Let  G be  a reducible  graph,  and  let  S be  a subset  of 

a minimum  cutset  in  G.  If  is  a maximal  active  head  in  G, 

then  SU{Vj^}  is  also  a subset  of  a minimum  cutset  in  G. 

Proof : Since  is  an  active  had,  there  is  a simple  cycle 

. s 

•••  in  in  which  is  the  (unique) 

c 

backward  edge.  If  C„  is  any  other  cycle  in  which  is  cut  by 
some  v^  (2  i ^ k)  , then  and  have  a common  vertex  v^  . 

By  Theorem  2,  either  v^  or  the  head  in  (call  it  v')  is  con- 
tained in  both  cycles.  If  the  active  head  v'  is  contained  in  C2 , 
then  there  is  a dag  path  (along  C^)  from  v^  to  v ^ , which  contra- 
. diets  the  maximality  of  the  active  head  v^^  (unless  v^  = v*).  Thus 

v^  must  cut  and  we  can  apply  Theorem  1 in  order  to  deduce 

that  SUlVj^}  is  a subset  of  a minimum  cutset  in  G. 

Q.E.D. 

The  basic  algorithm  is  now  a straightforward  consequence  of 
Theorem  3 : 

Algorithm  A 

^ 1)  Start  with  S = (})  . 

I 

2)  Select  a maximal  active  head  v in  G with  respect  to  the 

t 

current  set  S.  If  there  is  none,  stop,  otherwise  set 
S SU{v}  and  go  on  to  step  2. 

When  implementing  this  algorithm,  it  is  convenient  to 
enumerate  the  heads  in  G by  a DFS,  and  to  consider  them  in 
I 
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postorder.  By  the  properties  of  DFS,  all  the  dag  descendents 
of  a vertex  v (and  in  particular  the  active  heads  among  them) 
occur  before  v in  the  postorder.  Any  head  which  is  found  to  be 
active  at  some  intermediate  stage  in  the  algorithm  is  immediately 
added  to  S,  thus  ceasing  to  be  active  with  respect  to  the  new  S. 
Furthermore,  the  set  S can  only  expand,  and  thus  a non-active 
head  cannot  become  active  again  at  a later  stage.  Consequently, 
if  heads  are  considered  in  postorder,  then  any  head  which  is 
still  active  when  its  turn  comes  is  a maximal  active  head. 

Algorithm  A can  thus  be  implemented  on  a pointer  machine  in 
the  following  way: 

' Algorithm  B 

Note : "top"  represents  the  vertex  which  is  currently  at  the  top 
of  the  stack. 

t 

1)  Set  S •<-(() , push  r into  the  (empty)  stack. 

2)  If  there  is  an  unmarked  edge  top  v,  mark  it  and  go  to  step  3, 
otherwise  go  to  step  6. 

3)  If  V has  not  been  visited  so  far,  push  v into  the  stack  and 
go  to  step  2 . 

f 4)  If  top  >■  V is  a backward  edge,  mark  v as  a head. 

5)  Go  to  step  2. 

I* 

••  6)  If  V is  marked  as  a head  and  is  active  with  respect  to  the 

current  set  S,  set  S ■<-  SU{v}. 

7)  Pop  the  top  of  the  stack;  if  the  stack  is  empty,  halt, 

^ otherwise  go  to  step  2 . 

f 

4. 


i 
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A straightforward  implementation  of  step  6,  based  directly 
on  the  definition  of  an  active  head,  can  be  quite  inefficient, 
but  at  least  it  shows  that  minimum  cutsets  in  reducible  graphs 
can  be  found  in  polynomial  time.  In  the  following  section  we 
optimize  this  "pedagogical"  algorithm  into  a linear  time 
algorithm. 

VI . The  Linear  Algorithm 

The  simplest  way  of  checking  whether  a given  head  v is 
active  is  to  search  for  uncut  dag  paths  between  v and  its  corres- 
ponding tails.  This  can  be  done  in  linear  time  by  propagating 
labels  from  v through  the  dag  edges,  but  the  labeling  process 
has  to  be  repeated  for  any  maximal  head,  thus  giving  a |V|- |e1 
algorithm. 

In  order  to  develop  a more  efficient  algorithm,  we  structure 
the  search  in  such  a way  that  each  edge  is  used  only  once,  even 
though  it  may  belong  to  dag  paths  between  many  head-tail  pairs 
in  G.  Since  the  search  must  convey  sufficient  information  in 
order  to  determine  which  of  these  paths  are  cut  and  which  are 
still  open,  it  seems  that  we  need  labels  that  are  sets  of  heads. 
Unfortunately,  this  method  leads  to  non-linear  algorithms  even 
when  the  best  known  set  manipulating  techniques  {Tarjan  [1975] ) 
are  used. 

As  it  turns  out,  the  special  structure  of  reducible  graphs 
allows  us  to  use  much  more  economical  labels.  To  each  vertex  v 
we  attach  a single  number  ?-g(v)  , which  may  change  when  new 
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cutpoints  are  added  to  the  current  set  S.  Denoting  by  number (v)  | 

(an  integer  between  1 and  |v[ ) the  position  of  v in  the  preorder  | 

(rather  than  postorder)  sequence  of  vertices  in  G,  we  define:  ] 

Definition  : (v)  = max  {number  (v'^)  | there  exists  a 

ii  t * // 

backward  edge  v > v , and  a dag  path  v ^ v which  is  i 

not  cut  by  S } . 

If  no  such  head  w'  exists,  then  I (v)  is  defined  to  be  0. 

s ; 

Example : Consider  the  graph  in  Fig.  2,  in  which  number (v^)  - i 

for  all  the  vertices.  When  S = fv,^},  there  are  only  two  heads  i 

(Vi,V2)  whose  corresponding  tails  are  accessible  from  v^  through 

a path  which  is  not  cut  by  S.  Since  number(v^)  > number(v^) , 

I (v^)  = 2.  When  S = (J) , on  the  other  hand,  there  is  also  an 
s 3 

uncut  dag  path  v^  v^  to  the  tail  of  the  backward  edge  '^5  '^3' 

and  thus  I (v-,)  =3.  □ ^ 

s 3 ^ 

i 

Let  us  now  assume  that  these  labels  are  initialized  and 

i 

updated  (whenever  S changes)  by  some  external  process,  so  that  : 

Algorithm  B can  take  advantage  of  this  extra  piece  of  information.  j 

] 

The  following  theorem  shows  that  when  successive  active  heads  are  j 

5 

1 

considered  and  deactivated  in  postorder,  step  6 in  Algorithm  B ^ 

1 

can  be  implemented  as  a simple  check  which  requires  only  constant  ] 

time:  1 

Theorem  4 : Let  G be  a reducible  graph  and  let  S be  an  arbitrary 

set  of  vertices  in  it.  If  v is  a vertex  such  that  none  of  its 

dag  descendants  is  an  active  head,  then  v itself  is  an  active 

head  iff  S (v)  = number (v). 

S I 
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Proof ; We  first  show  that  if  ^g(v)  = number (v) , then  v is  an 
active  head  (the  additional  assumption  about  v is  needed  only 
for  the  other  direction) . 

Since  number (v)  is  always  non-zero,  ^g(v)  ^ 0 and  thus 
there  exists  a backward  edge  v" v'  and  an  uncut  dag  path 

* II  , 

V - V such  that  £^(v)  = number (v  ) . Since  vertices  are  uniquely 
numbered,  v'=  v,  and  thus  v is  a head  and  v **  is  one  of  its 

* fl 

corresponding  tails.  Since  v > v is  not  cut  by  S,  v is  an 
active  head  in  G. 

On  the  other  hand,  if  v is  an  active  head  then  there  is  an 
uncut  path  from  v to  a corresponding  tail  v"  , and  by  definition 
£^(v)  is  at  least  number  (v).  Suppose  ^■g(v)  = number  (v’)>  number  (v). 
Then  there  is  a backward  edge  v"-  v'  and  an  uncut  dag  path  v ► v* . 
By  the  properties  of  preorder  numbers,  v is  visited  by  the  DFS 
before  v'.  If  v ' is  not  a dag  descendant  of  v,  then  the  dag- 
descendent  v'^  of  v is  also  visited  before  v'  , contradicting  the 

assumption  that  v*'^  v*  is  a backward  edge.  Consequently,  there 

* / 

is  some  dag  path  v ->•  v in  G. 

By  the  properties  of  reducible  graphs,  the  head  v*  dominates 

* It 

the  tail  v",  and  thus  v must  be  contained  in  any  path  r > v 

* * II  * u 

Consider  in  particular  the  dag  path  r v v in  which  v -*■  v is 

, * 

the  given  uncut  path.  The  vertex  v cannot  occur  along  the  r v 
subpath,  since  it  is  a dag  descendent  of  v.  Consequently,  v' 

* If 

occurs  along  the  uncut  dag  path  v ► v , and  thus  there  is  also 
an  uncut  dag  path  v ‘ v . This  implies  that  v is  an  active 


w 
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head,  thus  contradicting  the  assumption  about  v (note  that  the 
degenerate  case  v = v'  is  impossible,  since  number (v')  > number (v)) 

Q. E.D . 

What  remains  to  be  done  is  to  develop  an  efficient  procedure 
for  generating  the  labels  Jl^{v).  If  we  first  calculate  all  these 
labels  with  respect  to  the  initial  set  S = 'p , we  may  have  to 
spend  too  much  time  updating  them  as  S changes.  Instead,  we  mix 
together  the  two  operations  of  label  calculation  and  outpoint 
selection.  At  any  intermediate  stage  in  the  process,  only  some  | 

of  the  vertices  in  G have  Labels  (say,  the  subset  L) , and  S is  a ] 

I 

subset  of  these  labelled  vertices.  In  order  to  make  the  process  j 

efficient,  we  must  add  new  vertices  to  L and  S according  to  the 

following  rules;  j 

(i)  Vertices  are  added  to  L in  postorder,  i.e.,  a vertex  is 

labelled  only  after  the  labels  of  all  its  dag  sons  are 

known.  This  order  minimizes  the  effort  involved  in  : 

calculating  the  labels. 

(ii)  A vertex  can  be  added  to  S only  immediately  after  it  is 

added  to  L.  This  order  minimizes  the  effort  involved  ; 

in  updating  the  labels,  as  S expands.  ■ 

It  is  a convenient  coincidence  that  the  natural  process- 
ing order  in  Algorithm  B (which  was  defined  for  entirely 

different  purposes)  exactly  satisfies  these  two  con-  ; 

I 

ditions.  j 


J 
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We  now  develop  two  procedures,  one  for  adding  a vertex  to  L 
(keeping  s fixed)  and  one  for  adding  a vertex  to  S (keeping  L 
fixed).  These  "atomic"  procedures  preserve  the  correctness  of 
the  labels  in  the  set  L with  respect  to  the  outpoints  in  the 
set  S,  and  the  overall  correctness  of  the  labelling  process 
then  follows  by  induction  on  |l[  + |s(. 

The  procedure  for  extending  L is  motivated  by  the  following 
theorem: 


Theorem  5 : Let  G be  a reducible  graph  and  let  S be  an  arbitrary 

set  of  vertices.  Then  for  any  vertex  v in  G,  the  following 
equation  holds: 


s 


(V) 


where  v ^ v^ 
and  V -> 
from  V. 


0 if  veS  or  v does  not  have  descendents  in  G 
max [ft  (v. ),..., ft  (v.),  number (v , number (v,)] 

SJ.  SI  X+X  K 

otherwise 

, ...  , V ->  v^  are  all  dag  edges  emanating  from  v, 

...  , V ->  v.  are  all  the  backward  edges  emanating 


Proof:  If  veS  or  v does  not  have  sons,  then  I (v)  must  be  0 

s 

since  there  cannot  be  any  uncut  dag  path  from  v to  a tail  of 
a backward  edge. 

If  V is  not  in  S,  then  clearly  I (v)  ^ number (v.)  for  any 

s j 

vertex  v^  such  that  v v^  is  a backward  edge,  since  there  is  a 

trivial  path  from  v to  the  tail  v whose  corresponding  head  is  v^ . 

Similarly,  if  v is  not  in  S then  £ (v)  > £ (v.)  for  any  v.  such 
^ s s 3 D 


that  V -►  Vj  is  a dag  edge,  since  any  uncut  dag  path  from  to  a 

tail  can  be  extended  to  an  uncut  dag  path  from  v to  that  tail. 

Consequently,  must  be  at  least  the  maximum  specified  in  the 

theorem. 

On  the  other  hand,  cannot  exceed  this  maximum,  since 

any  dag  path  from  v to  a tail  is  either  trivial,  or  else  uses 
! some  dag  edge  > v_.  emanating  from  v.  The  corresponding  head's 

I number  is  thus  bounded  from  above  by  at  least  one  entry  in  the 

■ maximum.  Q.E.D. 

The  equation  in  Theorem  5 shows  how  a new  label  can  be 

computed  in  postorder  from  the  known  labels  of  its  dag  sons,  and 

from  the  numbers  of  its  corresponding  heads.  Note  that  while 
the  labels  of  these  backward  sons  are  still  unknown,  they 
already  have  preorder  numbers,  and  thus  no  preliminary  graph 
traversal  is  needed  in  order  to  prepare  these  numbers.  Note 
further  that  when  the  label  of  v is  first  computed,  v^S/  and 
thus  the  check  vsS  in  the  equation  in  Theorem  5 is  superficial. 

The  procedure  for  computing  these  labels  makes  use  of  the 
fact  that  max  is  an  associative  operation,  and  thus  it  can  be 
computed  incrementally,  taking  new  son  values  into  account  as 
they  become  available.  The  "temporary  labels"  thus  obtained 

I 

become  valid  labels  as  soon  as  all  the  sons  of  v are  visited 
and  we  are  ready  to  backtrack  from  v.  The  number  of  operations 
involved  in  adding  a new  vertex  to  L is  equal  to  its  out-degree, 
and  thus  all  the  'v]  vertices  can  be  added  to  L by  at  most  |h| 
max  operations. 


t , 
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We  now  consider  the  probJem  of  updating  the  labels  of 
vertices  in  L when  a new  vertex  is  added  to  S.  As  proved  in 
the  following  theorem,  at  most  one  label  can  be  affected  if  the 
rules  of  the  game  are  observed. 

Theorem  6 ; Let  G be  a reducible  graph,  let  L be  a set  of  vertices 
for  which  labels  have  been  computed  in  postorder,  and  let  S be 
a subset  of  L.  If  v is  the  next  vertex  added  to  L,  then  adding 
V to  S leaves  all  the  labels  in  L correct  with  respect  to  the 
new  set  SU{v},  and  changes  Z , (v)  to  0. 

S U V j 

Proof ; The  fact  that  ~ ® follows  from  the  definition, 

since  any  dag  path  from  v to  a tail  is  cut  by  SUfv}  . 

If  v'  is  any  other  vertex  for  which  is  already  known, 

then  all  the  dag  descendents  of  v'  are  in  L,  and  thus  none  of 

them  is  v.  Since  the  addition  of  v to  S cannot  affect  the  uncut 

dag  paths  from  v'  to  tails,  £ , (v')  = £ v^) . 

^ s u i V } s 

Q . E . D . 

The  final  algorithm  uses  a single  DFS  of  G in  order  to 
number  the  vertices  of  G in  preorder,  to  label  them  in  postorder, 

• to  consider  successive  heads  in  postorder,  and  to  add  new 

vertices  to  S (changing  their  labels  to  0)  when  their  postorder 
label  and  preorder  number  coincide.  It  uses  the  same  skeleton 
as  Algorithm  B,  and  its  time  and  space  complexities  are  clearly 
linear  in  the  size  |v|+|e|  of  G.  Even  though  this  algorithm 
is  concise  and  easy  to  implement,  its  formal  proof  of  correctness 
(say,  using  Floyd's  inductive  assertions  method)  is  surprisingly 


subtle . 
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Algorithm  C 

(Note:  labels  are  denoted  by  l{v),  without  an  explicit  set 

subscript;  the  algorithm  keeps  only  one  system  of  such  labels, 
which  correspond  at  any  stage  to  the  current  set  S.) 

1)  Set  S •<-  (fi ; set  vertex  counter  c -f-  1 ; clear  all  flags; 
push  r into  the  (empty)  stack. 

2)  Set  number  (top)  c , c c + 1 , SI  (top)  ■*-  0 . 

3)  If  there  is  some  unmarked  edge  top  + v,  mark  it  and 
proceed,  otherwise  go  to  step  7. 

4)  If  V has  not  been  visited  so  far,  push  v into  the 
stack  and  go  to  step  2. 

5)  If  top  ’■V  is  a backward  edge,  set 

1 (top)  iuax  ( Sc  (top)  , number  (v)  ) and  to  to  step  3. 

6)  Set  £(top)  •<-  max  (SI  (top),  l{v))  and  go  to  step  3. 

7)  If  2.  (top)  = number  (top),  set  S ■<-  SU{top)  and  2 (top)  0. 

8)  Save  the  current  top  of  the  stack  in  v ' ; pop  the  stack; 
if  the  stack  is  empty,  halt,  otherwise,  set 

2 (top)  max  (2  (top),  2 (v' ) ) ; go  to  step  3. 

Example : We  demonstrate  the  operation  of  Algorithm  C on  the 

graph  G in  Fig.  2.  Note  that  the  DFS  in  which  left  sons  are 
considered  before  right  sons  gives  rise  to  preorder  numbers 
satisfying  number (v^)  = i for  all  i. 


m 
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We  start  by  settiiiy  S •>  <>  and  pushinq  the  root  into  the 

stack.  We  then  proceed  along  the  dag  path  ^ '^4' 

pushing  stack.  The  edge  is  then 

found  to  be  a backward  edge,  and  thus  l^(v^)  ■>-  max  { 0 , number  (v^ ) ) = 2. 

Since  V,  does  not  have  other  sons,  we  check  that 
4 

i(v^)  = 2 4 = number  (v^),  pop  it  from  the  stack,  and  set 

£(v^)  *■  max  ( 0 , J,  (v^ ) ) = 2.  The  vertex  v^  is  then  pushed  into 
the  stack,  and  the  traversal  of  the  backward  edge  v^  -►  v^  sets 
l[v^)  *■  max  (0 , number  (v^)  ) = 3.  Popping  v^  from  the  stack,  we 
update  a(v^)  ■*-  min{2,2(v^))  = 3.  We  then  consider  the  backward 
edge  v^  -*  v.^,  which  sets  max  (3,  number  (v^^ ) ) = 3.  Before 

popping  v^  from  the  stack,  we  discover  that  = 3 = number  (v^), 

and  we  thus  add  v^  to  S and  change  its  label  to  0. 

During  the  rest  of  the  process,  vertex  v^  gets  the  label  2 
calculated  earlier  for  v , vertex  v^  gets  the  label  2 

4 D 

(as  max  (0 , d (v^ ) , S,(v^),  number(v^)),  and  vertex  v^  gets  the 

label  2 (as  max ( 0 , £ (v^ ) , £(v^)).  Before  backtracking  from 

J b 

to  v^  we  again  discover  that  ^ “ number  (v^),  and  thus 

add  v^  to  S , changing  its  label  to  0.  This  leads  to 
2,(Vj^)  max  (0 , (V2>  ) = 0,  and  the  algorithm  halts  after  v^^  is 

popped  from  the  stack. 

The  minimum  cutset  found  by  the  algorithm  is  S = {V2,V2)- 
It  is  not  uniquely  minimum  since  {v^,V2)  is  also  a cutset. 


All  the  other  cutsets  contain  three  or  more  vertices. 


□ 
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